A fairly old guide I wrote but the core ideas remain the same: https://uzakov.io/2017/05/08/pretty-good-setup-pgs/ https://uzakov.io/2017/05/08/pretty-good-setu

A fairly old guide I wrote but the core ideas remain the same: https://uzakov.io/2017/05/08/pretty-good-setup-pgs/ https://uzakov.io/2017/05/08/pretty-good-setup-pgs/ Mentions many things mentioned in the comments as well as other good security measures